Security

Microsoft security updates and public advisory evidence: affected products, fixing updates, exploitation and source coverage.

Security Update Guide CISA KEV

Advisory catalog

Public source statements across vendors. Explicit aliases connect records; each publisher keeps its own state, severity and affected-version evidence.

Collected statements

698821 source statements · aliases may refer to the same vulnerability

CVE-2026-87721Published

Denial of Service via Exponential Backtracking in ANTLR Search Query Parser in Gerrit Code Review

cve-program ·

Vendor product: Gerrit

CVSS 4.0 8.7Source modified 25 Sep 2026Recorded 23 Oct 2026

CVE-2026-78902Published

Cross Site Scripting vulnerability in Netgate pfSense 26.03.1-RELEASE allows an attacker to execute arbitrary code via the pfBlockerNG package

cve-program ·

Vendor product: n/a

Source modified 25 Sep 2026Recorded 23 Oct 2026

CVE-2026-88421Published

Incorrect access control in the BlogPage.get_entries() component of APSL puput v1.2.1 through v2.2.0 allows unauthenticated attackers to view restricted blog entries via the blog index, the tag, category, author and date archives, the sideb…

cve-program ·

Vendor product: n/a

Source modified 25 Sep 2026Recorded 23 Oct 2026

CVE-2026-67412Published

RabbitMQ: Federation upstream skips vhost authorization allowing cross-vhost message access

cve-program ·

Vendor product: rabbitmq-server

CVSS 4.0 6.0Source modified 25 Sep 2026Recorded 23 Oct 2026

CVE-2026-87722Published

Regular Expression Denial of Service (ReDoS) in Search Query Predicates and REST Filter Endpoints in Gerrit Code Review

cve-program ·

Vendor product: Gerrit

CVSS 4.0 8.7Source modified 25 Sep 2026Recorded 23 Oct 2026

CVE-2026-67239Published

RabbitMQ: Stored XSS via TLS peer-certificate DN in stream-management UI

cve-program ·

Vendor product: rabbitmq-server

CVSS 4.0 7.6Source modified 25 Sep 2026Recorded 23 Oct 2026

CVE-2026-66073Published

RabbitMQ: Atom table exhaustion via management API node field

cve-program ·

Vendor product: rabbitmq-server

CVSS 4.0 6.0Source modified 25 Sep 2026Recorded 23 Oct 2026

CVE-2026-67225Published

RabbitMQ: Stream-protocol frame length never validated against frame_max

cve-program ·

Vendor product: rabbitmq-server

CVSS 4.0 6.3Source modified 25 Sep 2026Recorded 23 Oct 2026

CVE-2026-97871Published

Zhonglun CloudPos JSBridge JSBridge.cs OpenLocalBrowser code injection

cve-program ·

Vendor product: CloudPos

CVSS 4.0 6.9 · CVSS 3.1 7.3 · CVSS 3.0 7.3 · CVSS 2.0 7.5Source modified 25 Sep 2026Recorded 23 Oct 2026

CVE-2026-44642Published

Piwigo: SQL injection in upgrade authentication allows unauthenticated upgrade authorization bypass (PHP 8+)

cve-program ·

Vendor product: Piwigo

CVSS 3.1 8.1Source modified 25 Sep 2026Recorded 23 Oct 2026

CVE-2026-97875Published

DNS rebinding vulnerability in rojo serve HTTP API

cve-program ·

https://crates.io: rojo

CVSS 3.1 8.1Source modified 25 Sep 2026Recorded 23 Oct 2026

CVE-2026-91837Published

Networkmanager-iodine: networkmanager-iodine: local privilege escalation to root via nameserver option injection

cve-program ·

https://gitlab.gnome.org/GNOME/network-manager-iodine: network-manager-iodine

CVSS 3.1 7.8Source modified 25 Sep 2026Recorded 23 Oct 2026

CVE-2026-97636Published

Apache Airflow HashiCorp provider: HashiCorp Vault secrets backend: team-scope guard bypass via user-controlled key

cve-program ·

https://pypi.python.org: apache-airflow-providers-hashicorp

Source modified 25 Sep 2026Recorded 23 Oct 2026

CVE-2026-97869Published

langchain4j LangChain4j-agentic AgenticScopeJsonSerializationIT.java AgenticScopeSerializer.fromJson deserialization

cve-program ·

Vendor product: langchain4j

CVSS 4.0 2.1 · CVSS 3.1 4.1 · CVSS 3.0 4.1 · CVSS 2.0 4.3Source modified 25 Sep 2026Recorded 23 Oct 2026

CVE-2026-85274Published

InvoicePlane: Recurring Invoice State Change via GET Request Without CSRF Protection

cve-program ·

Vendor product: InvoicePlane

CVSS 3.1 6.5Source modified 25 Sep 2026Recorded 23 Oct 2026

CVE-2026-85491Published

Catalyst::Seal versions before 0.03 for Perl allow one request to disable a path or route a later one past an authorization check via a dispatch memo keyed on the request path alone

cve-program ·

https://cpan.org/modules: Catalyst-Seal

Source modified 25 Sep 2026Recorded 23 Oct 2026

CVE-2026-88956Published

Botslab G980H Dashcams Missing Authentication for Critical Function

cve-program ·

Vendor product: G980H

CVSS 4.0 7.0 · CVSS 3.1 6.8Source modified 25 Sep 2026Recorded 23 Oct 2026

CVE-2026-85496Published

Botslab G980H Dashcams Generation of Predictable Numbers or Identifiers

cve-program ·

Vendor product: G980H

CVSS 3.1 8.8 · CVSS 4.0 7.7Source modified 25 Sep 2026Recorded 23 Oct 2026

CVE-2026-51997Published

An issue in geelen mcp-remote 0.1.16 through 0.1.38 allows a remote attacker to execute arbitrary code via the open() functions

cve-program ·

Vendor product: n/a

Source modified 25 Sep 2026Recorded 23 Oct 2026

CVE-2026-77967Published

Botslab G980H Dashcams Authentication Bypass by Capture-replay

cve-program ·

Vendor product: G980H

CVSS 3.1 8.1 · CVSS 4.0 8.6Source modified 25 Sep 2026Recorded 23 Oct 2026

CVE-2026-88761Published

Botslab G980H Dashcams Use of Weak Credentials

cve-program ·

Vendor product: G980H

CVSS 3.1 5.3 · CVSS 4.0 6.0Source modified 25 Sep 2026Recorded 23 Oct 2026

CVE-2026-82716Published

Botslab G980H Dashcams Insertion of Sensitive Information into Log File

cve-program ·

Vendor product: G980H

CVSS 4.0 5.1 · CVSS 3.1 4.6Source modified 25 Sep 2026Recorded 23 Oct 2026

CVE-2026-84403Published

Botslab G980H Dashcams Missing Authentication for Critical Function

cve-program ·

Vendor product: G980H

CVSS 4.0 6.9 · CVSS 3.1 6.2Source modified 25 Sep 2026Recorded 23 Oct 2026

CVE-2026-75558Published

Botslab G980H Dashcams Use of Hard-coded Cryptographic Key

cve-program ·

Vendor product: G980H

CVSS 4.0 6.0 · CVSS 3.1 5.3Source modified 25 Sep 2026Recorded 23 Oct 2026

CVE-2026-51773Published

An issue in the VMware datastore driver of OpenStack glance_store. When an authenticated attacker provides a maliciously crafted image location URI pointing to an external server, the _retry_request function fails to validate the destinatio…

cve-program ·

Vendor product: n/a

Source modified 25 Sep 2026Recorded 23 Oct 2026

CVE-2026-81630Published

Botslab G980H Dashcams Insufficient Verification of Data Authenticity

cve-program ·

Vendor product: G980H

CVSS 4.0 9.2 · CVSS 3.1 8.1Source modified 25 Sep 2026Recorded 23 Oct 2026

CVE-2026-87118Published

Botslab G980H Dashcams Out-of-bounds Write

cve-program ·

Vendor product: G980H

CVSS 4.0 6.9 · CVSS 3.1 5.7Source modified 25 Sep 2026Recorded 23 Oct 2026

CVE-2026-82708Published

Botslab G980H Dashcams Improper Limitation of a Pathname to a Restricted Directory

cve-program ·

Vendor product: G980H

CVSS 4.0 7.1 · CVSS 3.1 6.5Source modified 25 Sep 2026Recorded 23 Oct 2026

CVE-2026-79959Published

Botslab G980H Dashcams Use of Hard-coded Credentials

cve-program ·

Vendor product: G980H

CVSS 4.0 7.0 · CVSS 3.1 6.8Source modified 25 Sep 2026Recorded 23 Oct 2026

CVE-2026-85292Published

InvoicePlane: Loose Type Comparison in Core Authentication Check (Defense-in-Depth)

cve-program ·

Vendor product: InvoicePlane

CVSS 3.1 4.8Source modified 25 Sep 2026Recorded 23 Oct 2026

CVE-2026-82585Published

Botslab G980H Dashcams Cleartext Transmission of Sensitive Information

cve-program ·

Vendor product: G980H

CVSS 4.0 7.1 · CVSS 3.1 6.5Source modified 25 Sep 2026Recorded 23 Oct 2026

CVE-2026-88359Published

libfyaml 0.9.6 contains a stack exhaustion vulnerability in fy_atom_iter_format(). When processing a specially crafted YAML document containing a very large literal or folded block scalar, the function repeatedly grows an internal buffer us…

cve-program ·

Vendor product: n/a

Source modified 25 Sep 2026Recorded 23 Oct 2026

CVE-2026-49850Published

InvoicePlane: Missing CSRF Protection on State-Changing delete Actions

cve-program ·

Vendor product: InvoicePlane

CVSS 3.1 7.5Source modified 25 Sep 2026Recorded 23 Oct 2026

CVE-2026-95699Published

MrSteam iSteamX Improper Isolation or Compartmentalization

cve-program ·

Vendor product: iSteamX application · Vendor product: iSteamX Hub

CVSS 4.0 8.4 · CVSS 3.1 9.6Source modified 25 Sep 2026Recorded 23 Oct 2026

CVE-2026-88362Published

MuJS e892c9fdb contains an incorrect numeric conversion vulnerability in jsR_isindex() in jsrun.c. A specially crafted JavaScript input containing an excessively large numeric array index can cause an out-of-range floating-point value to be…

cve-program ·

Vendor product: n/a

Source modified 25 Sep 2026Recorded 23 Oct 2026

CVE-2026-42324Published

Piwigo: Second-Order SQL Injection

cve-program ·

Vendor product: Piwigo

CVSS 3.1 7.2Source modified 25 Sep 2026Recorded 23 Oct 2026

CVE-2026-97222Published

Gnumeric: gnumeric: heap use-after-free when opening a malformed workbook

cve-program ·

https://gitlab.gnome.org/GNOME/gnumeric: gnumeric

CVSS 3.1 5.5Source modified 25 Sep 2026Recorded 23 Oct 2026

CVE-2026-100190Published

Stored Cross-Site Scripting (XSS) via Crawler Capture Import in AIL Framework showDomain Page

cve-program ·

Vendor product: ail framework

CVSS 4.0 6.3Source modified 25 Sep 2026Recorded 23 Oct 2026

CVE-2026-61714Published

FluidSynth: Heap Buffer Overflow in MIDI Player

cve-program ·

Vendor product: fluidsynth

CVSS 3.1 7.8Source modified 25 Sep 2026Recorded 23 Oct 2026

CVE-2026-93641Published

Zimbra Collaboration Suite Classic Web Client Stored Cross-Site Scripting via Forged Share Invitation

cve-program ·

Vendor product: Zimbra Collaboration Suite (ZCS)

CVSS 3.1 9.3Source modified 25 Sep 2026Recorded 23 Oct 2026

CVE-2026-97230Published

IO::Socket::SSL::SelfCertificate versions 1.00 for Perl contains malware which executes Python code from an obfuscated URL

cve-program ·

https://cpan.org/modules: IO-Socket-SSL-SelfCertificate

Source modified 25 Sep 2026Recorded 23 Oct 2026

CVE-2026-93642Published

Zimbra Collaboration Suite Modern Web Client Stored Cross-Site Scripting via Forged Share Invitation

cve-program ·

Vendor product: Zimbra Collaboration Suite (ZCS)

CVSS 3.1 9.3Source modified 25 Sep 2026Recorded 23 Oct 2026

CVE-2026-100230Published

Input Leap (aka input-leap) through 3.0.3, when the non-default --enable-drag-drop option is used on Windows or macOS, mishandles the / versus \ distinction and allows directory traversal, with resultant code execution if a file is written …

cve-program ·

Vendor product: Input Leap

CVSS 3.1 5.3Source modified 25 Sep 2026Recorded 23 Oct 2026

CVE-2026-96812Published

Host Root Sandbox Escape in gVisor via Character Device Passthrough and CUSE

cve-program ·

Vendor product: gVisor

CVSS 4.0 8.8Source modified 25 Sep 2026Recorded 23 Oct 2026

CVE-2026-97469Published

PostgreSQL Anonymizer: RESTRICTED functions are reachable through a subLink

cve-program ·

Vendor product: PostgreSQL Anonymizer

CVSS 3.1 4.3Source modified 25 Sep 2026Recorded 23 Oct 2026

CVE-2026-50547Published

InvoicePlane permits local file inclusion through the e-invoice XML configuration identifier

cve-program ·

Vendor product: InvoicePlane

CVSS 3.1 7.5Source modified 25 Sep 2026Recorded 23 Oct 2026

CVE-2026-84283Published

FluteCode Secure Folder 1.2 -Plaintext vault files in shared storage bypass the PIN gate

cve-program ·

Vendor product: Secure Folder

CVSS 4.0 6.8Source modified 25 Sep 2026Recorded 23 Oct 2026

CVE-2026-39353Published

InvoicePlane: Remote Code Execution via Writable Templates Directory

cve-program ·

Vendor product: InvoicePlane

CVSS 3.1 9.1Source modified 25 Sep 2026Recorded 23 Oct 2026

CVE-2026-85082Published

Maple Media Root Browser Classic 3.3.0 - OS command injection through crafted SQLite filenames

cve-program ·

Vendor product: Root Browser Classic

CVSS 4.0 8.5Source modified 25 Sep 2026Recorded 23 Oct 2026

CVE-2026-36471Published

Deserialization of Untrusted Data of the __post_data parameter in cn_parse_url() in CuteNews v.2.1.2 allows a remote attacker to inject arbitrary values into internal request variables (including __referer) via a crafted base64-encoded seri…

cve-program ·

Vendor product: n/a

Source modified 25 Sep 2026Recorded 23 Oct 2026

A catalog match establishes published evidence, not applicability to your environment. Check resolved package dependencies, or open a Microsoft CVE for fixing KBs, releases and planning.